Easiest way to block entire domain via DNS

[clickwir]

I'm looking for a way to block an entire domain (ex: domain.com, www.domain.com, sub1.domain.com, anything.domain.com ...) at the DNS level.

/etc/hosts would be ok if I knew all the subdomains, but I don't know them and they always change/update. How can I simply block all DNS resolution for an entire domain from my local Kubuntu machine without having to do it for my whole network?

[SteveRiley]

Mind if we ask you to describe why you want to do this? Perhaps there's an alternate solution to the actual problem.

[Teunis]

This?

http://ask.slashdot.org/story/13/04/...ecurity-probes

[SteveRiley]

Interesting, but that story describes an attempt to block inbound traffic, described as various kinds of probes.

clickwir, the OP, describes something different -- a desire to block DNS resolution of all machines in a given domain. Usually, there are better ways to address the kinds of security problems that might seem amenable to this approach. But until the OP replies, we'll have to wait for more details.